CVE-2025-12839

A flaw was found in OpenEXR. This heap-based buffer overflow vulnerability occurs during the parsing of EXR files due to improper validation of user-supplied data length. A remote attacker could exploit this by tricking a user into opening a specially crafted malicious EXR file. Successful exploitation could lead to arbitrary code execution in the context of the current process.

This vulnerability is rated Important for Red Hat products. Exploitation requires user interaction, where a target must open a specially crafted malicious EXR file.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Users should exercise caution when handling untrusted EXR files. Avoid opening EXR files from unknown or suspicious sources. Additionally, consider running applications that process EXR files within a sandboxed environment to limit potential impact in case of exploitation.